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Abstract. Pairings are particular bilinear maps, and as any bilinear maps they factor through the 
tensor product as group homomorphisms. Besides, nothing seems to prevent us to construct pairings on 
other abelian groups than elliptic curves or more general abelian varieties. The point of view adopted 
in this contribution is based on these two observations. Thus we present an elliptic curve free study of 
pairings which is essentially based on tensor products of abelian groups (or modules). Tensor products 
of abelian groups are even explicitly computed under finiteness conditions. We reveal that the existence 
of pairings depends on the non-degeneracy of some universal bilinear map, called the canonical bilinear 
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map. In particular it is shown that the construction of a pairing on A x A is always possible whatever a 
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finite abelian group A is. We also propose some new constructions of pairings, one of them being based 
on the notion of group duality which is related to the concept of non-degeneracy. 
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f — . 1 Introduction 

A bilinear map is a function of two variables that belong to two finite abelian groups, and with 
values in another abelian group, such that when fixing one of its variable the map thus obtained is 
.yv a homomorphism of groups. Bilinear maps were originally introduced in cryptography in order to 

solve the discrete logarithm problem [24J . Due to bilinearity it is possible to transport this problem 
from a group for which it is assumed to be difficult to another one where the problem becomes easier. 
Afterwards, bilinear maps were used to define tripartite Diffie-Hellman key exchange protocol [18J. 
In these two situations, the bilinear maps under consideration are assumed to be non-degenerate, 
and are called pairings. For such a map f:AxB^-C, this means that apart from the identity 
element of A (respectively, B), there is no members of A (respectively, of B) that annihilate every 
member of B (respectively, of A). For these kinds of use the groups A, B, C are cyclic groups. Many 
pairings considered in the literature are naturally associated to some objects arising in algebraic 
(projective) geometry such as elliptic curves and more generally abelian varieties. For a long time 
pairings were variants of the Weil [31] and Tate [33j pairings over genus 1 or 2 curves over finite 
fields. More recently pairings over more general abelian varieties have been proposed [21J and even 
based on dot-products [26] for homomorphic encryption. 

More attention was given to pairings over elliptic curves for at least two reasons. First of all, 
it seems that the security level of such pairings with respect to the discrete logarithm problem 
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and to pairing inversions is high (see for instance [8]). Secondly, these pairings may be computed 
rather efficiently (with help of an efficient finite field arithmetic |l|12j or by optimized versions 
of Miller's algorithm [14 34]). Apart from these two important cryptographic issues, pairings are 
bilinear maps between finite abelian groups, and as any bilinear map, a pairing descends to the 
tensor product of abelian groups as a usual group homomorphism. It seems rather natural to 
study pairings through the notion of tensor product, and it is the point of view adopted in this 
contribution. More precisely, we study, and construct, bilinear maps between finite abelian groups 
(and more generally between modules over some fixed ring) seen as homomorphisms from a tensor 
product to an abelian group (or a module). This provides an elliptic curve free presentation of 
pairings between abstract groups. Not all our results are difficult, some of them are folklore, and 
lot of them may even be qualified as simple for group-theorists, but we think that one of the main 
worth of this work is to provide a unified treatment of pairings in an abstract setting. This approach 
is quite natural since many properties of pairings are independent from algebraic geometry. Because 
we have chosen to work at the abstract groups level, we do not deal with the cryptographic issues 
of efficiency and security. We believe that these gaps are balanced by the results stated in this 
contribution, and our rather general approach to pairings. We also believe that this work may serve 
as a basis for new constructions of cryptographically relevant pairings on other group structures 
than elliptic curves (see for instance [21.26]). 

The remainder of this contribution is organized as follows: Section [2] fixes the general notations, 
provides basic definitions about bilinear maps and pairings, and contains a brief overview on pairing- 
based cryptography. Section [3] is about the tensor product of groups and modules themselves, of 
which it provides a number of useful properties. Sectionals entirely devoted to the tensor product of 
finite abelian groups: the rules to compute any such tensor product are presented. It also deals with 
the canonical bilinear map (which is canonically attached to a tensor product) and the fact that 
non-degeneracy of a bilinear map depends of that of a canonical bilinear map. Section [5] contains 
several constructions of pairings. Some properties about known pairings are also recovered. 

2 An introduction to pairing-based cryptography 

2.1 Some notations and definitions 

Before introducing the notion of pairings and their use in cryptography, let us begin with some 
notations, useful hereafter in this contribution. 

Let / : X x Y — > Z be any set-theoretic map. For any x E X, we define the map f(x, •) : X — > Z 
by y '— >■ f(x,y), and symmetrically, for any y G Y is defined f(-,y)'- Y — >• Z by x H > f(x,y). 
The identity element of a group G is denoted either by Iq or by Oq ( or 1 or 0) whether G is 
given in multiplicative or additive notation. Let G,H,K be three groups (abelian or not). A map 
/ : G x H — > K is said to be bilinear if for every g E G, and every h E H, the maps /(<?,•): H — >■ K 
and f(-,h): G — >• K are homomorphisms of groups. The set of all bilinear maps from G x H to K 
is then denoted by 'BiKG x H,K). Actually, this notion may be defined in another setting, that of 
modules over some commutative ring. In this contribution, R always denotes a commutative ring 
with a unit 1r. Given three -R-modules, A,B,C, we say that a map /: A x B — > C is R-bilinear 
whenever for every a E A and every b E B, the maps /(o, •): B — )• C and /(■,&): A — >■ C are 
i?-linear. When R = Z, then Z-bilinear maps are exactly bilinear maps between abelian groups. 
In what follows, the set of all i?-bilinear maps from A x B to C is denoted by 'BUr(A x B,C). 
Moreover, we denote r Bi[i{A x B,C) simply by "Bit {A x B,C) since when A, B,C are abelian 
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groups both notions of bilinearity coincide. Continuing with notations, if G, H are groups, then 
9(om(G, H) is the set of all group homomorphisms from G to H, and if A, B are two -R-modules, 
then !Homji(A, B) is the set of all -R-linear maps from A to B. Again if A, B are abelian groups, 
then !tfom(A, B) = 'Hom Ij {A, B). 

Example 1. Let A be an abelian group. Let R* be the group of invertible elements of R. A bilinear 
map / : A x A — > R* is called a bicharacter [22]. When furthermore f(a, b)f(b, a) = 1 and /(a, a) = 
±1 for every a, b G A, f is said to be a commutation factor |32j . Such commutation factors are used 
to define color Lie superalgebras |3J. 

One of the main feature of a pairing (the definition of which is recalled hereafter) is the notion 
of non-degeneracy. Let G, H, K be three groups and A, B, C be three -R-modules. Let / G c Bil{G x 
H,K) (respectively, / G 'BiC^A x B,C)). The map / is said to be left non- degenerate if the map 
g G G i— > f(g, •) (respectively, a G A i— > /(a, •)) is one-to-one. In other terms this means that if for 
every h £ H (respectively, every b G B), f(g,h) = Ik (respectively, f(a,b) = Oc), then g = Iq 
(respectively, a = Oa)- The notions of right non- degeneracy are the evident symmetric ones, while 
we say that a bilinear map / is non- degenerate whenever it is both left and right non-degenerate. 
The map / is said to be degenerate if it is not non-degenerate. In its original form, a pairing is 
a non-degenerate bilinear map between finite abelian groups. For our purpose the definition of a 
pairing is somewhat extended to allow pairings between non-abelian groups or .R-modules. In brief, 
a pairing is a non-degenerate map / G ( Bit{G x H,K) (respectively, / G i BUr{A x B,C)) where 
G, H, K are groups (respectively, A, B, C are -R-modules). In particular, there is no size issue in the 
definition of a pairing although our examples will be given under finiteness assumptions. We also 
sometimes use the traditional "bracket" notation (• | •) to denote a pairing. 

Example 2. Let 1— > A — > G — > B —> 1 be & short exact sequence of groups, where A, B are 
abelian groups, and A lies in the center Z(G) of G {i.e., G is a central extension of abelian groups). 
Let [g,h] = ghg~ x hr x be the commutator of g, h G G. According to [2], [•, •] descends to the 
quotient as a bilinear map [•,•]: B x B — > A. Moreover it is alternating (i.e., [x,x] = 1 for every 
x G B). Finally, it is non-degenerate if, and only if, A = Z(G), so that we obtain a pairing 
[-,-]: G/Z(G) x G/Z(G) -)■ Z{G) (whenever G/Z{G) is abelian). 

2.2 Background on pairing-based cryptography 

We recall here the basic facts and definitions of pairings over elliptic curves. Let r be a prime 
integer, A, B, C be three abelian groups of order p. A pairing is a bilinear and non-degenerate map 
/ : A x B —7- C. We briefly present the most frequent choices for A, B and C in pairing-based 
cryptography. Let E be an elliptic curve over the finite field ¥ q of characteristic p. The integer r 
is chosen to be a prime divisor of |-E(F g )|, co-prime with p. A pairing is usually defined over the 
points of r-torsion of E: E[r] = {P G E(¥ q ) : rP = P^ }, where P^ is the point at infinity of the 
elliptic curve. We know that E[r] = Z/rZ x Z/rZ [dl\ Chap III Cor. 6.4]. The embedding degree k 
of E relatively to r is the smallest integer such that r divides (q — 1). A result of Balasubramanian 
and Koblitz 0] ensures that, when k > 1, all the points of E[r] are rational over the extension ¥ k 
of degree k, i.e., E[r] = E(¥ q k). The group A is then the subgroup generated by a point P G E(¥ q ) 
of order r. The subgroup B is chosen as another subgroup of order r of E[r], a popular choice is the 
subgroup generated by a point Q of order r over E(¥ q k), such that n(Q) = qQ, where PL represents 
the Frobenius endormorphism over ¥ q . Finally, the group C is the unique subgroup of order r of 



¥* k (it exists and is unique because r divides (q k — 1) and F* fc is a cyclic group). This choice of 
subgroups may be seen as the restriction to A x B of the Weil pairing on E[r] x E[r], or the Tate 
paring, or one of its variant (reduced Tate, Ate, twisted Ate, optimal pairing or pairing lattices). 
The Miller algorithm is used to computed all these pairings. 

The original objective of pairings in cryptography was to solve the discrete logarithm problem. 
The pairings shift the discrete logarithm problem from a subgroup over an elliptic curve to a discrete 
logarithm problem over a finite field. The interest is that the discrete logarithm problem is easier on 
finite fields compared to elliptic curves [21]. Later, the pairings were used to compose the tripartite 
Diffie-Hellman key exchange [18]. It was a simplification of the Diffie-Hellman key construction 
between three entities. Nowadays, pairings are used for several protocols such as identity based 
cryptography [5] or short signature schemes [19] . The security of pairing-based cryptography lays 
on the discrete logarithm problem over the three groups A, B and C [8]. 

3 Tensor product of groups (and modules) 

The notions of bilinear maps and tensor product are closely related as it is explained hereafter, 
and this relation is exploited in section [5] to construct new pairings on finite abelian groups. In 
brief, every bilinear map factors through a quotient group - the tensor product - as a linear map. 
The original bilinear map is recovered by composing this linear map with a "universal" bilinear 
map. Therefore the study of bilinear maps reduces to that of a unique (and universal) bilinear map 
and of those linear maps which are defined on a particular kind of groups (or R- modules) , namely 
the tensor product. In this section are recalled the constructions of the tensor product of groups 
and modules together with some of their basic properties. We also explain the reason why it is 
somewhat useless to define bilinear maps (or pairings) on non-abelian groups. Other properties of 
bilinear maps in the setting of finite abelian groups are presented in section [U 

3.1 Free (commutative) group and abelianization 

The basic notions recalled in this subsection may be found for instance in [TJ. 

Let G be a group. For any elements g,h E G, the commutator of g and h is [g, h] = g~ 1 h~ 1 gh 
(see example [2]) . The derived subgroup [G,G] is generated by all the commutators and it turns to 
be a normal subgroup of G. It is even the smallest normal subgroup such that the quotient group of 
G by this subgroup is abelian. Thus the quotient group G/[G,G], denoted by M{G), is an abelian 
group, called the abelianization of G. It satisfies the following property: let A be an abelian group, 
and / : G — > A be a homomorphism of groups, then there is a unique homomorphism of groups 
g: !Hb(G) — > A such that g o ir = /, where ir denotes the natural epimorphism G — > %6(G). 

Let X be a set. There exists a way to construct a group F(X), called the free group over X, that 
contains X, and which is the solutioio of the following "universal problem": for any group G and 
any set-theoretic map f:X—>G, there exists a unique homomorphism of groups g: F(X) — > G 
such that g(x) = f(x) for every x G X. The construction is made as follows: for each x G X, 
we introduce a new symbol, say x, and we let X denote the totality of these symbols. Then, we 
consider the free monoid (X U X)* over X U X. It consists of all words (including the empty 
word e), i.e., finite sequences of elements of X U X. The composition of words is the obvious one 
(concatenation), and e acts as the identity. Finally, let = be the least congruence of (X U X)* 



Actually a solution of a universal problem is only unique up to a unique isomorphism in some category, see 
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containing {(xx, e): x G X} U {(xx, e): x G X} (see [9j). It turns that the quotient monoid 
(X U X)*/ = (also known as the Grothendieck group completion of (X U X)*) is actually a group 
which is precisely the free group F(X). 

There also exists a similar construction for abelian groups, and more generally for modules. 
Recall that R is a commutative ring with a unit 1_r. An element / G R is said to be finitely 
supported whenever the set of all x G X such that f(x) 7^ is finite. For instance, for each x G X, 
the map 5 X G R that vanishes at all y 7^ x, and such that 5 x (x) = 1r is finitely supported. The set 
of all such functions is denoted by RS ' . It is a free i?-module with basis X (under identification 
of 5 X with x for each x G X). In particular, for R = Z, we obtain the free commutative group IS > 
on X. As it is expected, M(F(X)) = 7S X > (isomorphic as groups). 

3.2 Tensor product: construction and properties 

We are now in position to introduce the tensor product of groups and i?-modules. Let G, H be two 
groups (in multiplicative notation), and let N be the normal subgroup of F(G x H) generated by 
the elements (gg' ' ,h)(g,h)~ l (g' ',h)~ l and (g, hti)(g, h)' 1 ^, h'y 1 for all g,g' G G, h,h! G H. The 
quotient group F(G x H)/N is denoted by G ® H. We denote by g <8> h the image of (g,h) G G x H 
in G ® H and this clearly defines a bilinear map from G x H to G <S> H called the canonical bilinear 
map. The group G ® H also satisfies a universal property: for every group K and every bilinear 
map f:GxH^K, there exists a unique homomorphism of groups f':G®H^K such that 
f'(g h) = f(g, h) for every g G G and h £ H. 

Lemma 1. The image 0/ ® : G x H ^- G ® H generates G ® H, the group G ® H is abelian, and 
Ab(G) % &6{H) = G ® H (in particular, G ® H is an abelian group). 

Proof. The set G x H generates the free group F(G x H), and the natural map F(G x H) — > G®H 
is onto. Then, the group G ® i7 is generated by the image of G x H. Let f : G x H —> K be 
a bilinear map, where if is another group (say in additive notation even if it is not assumed to 
be commutative). Let g,g' G G, h,h' G H. We have f(g,h) + f(g,h') + f(g',h) + f(g',h') = 
f{g, hh!) + f(g', hh') = f(gg', hh') = f(gg', h) + f(gg', h') = f(g, h) + f(g', h) + f(g, h!) + f(g', h') 
so that f(g, h') + /(</, h) = f(g', h) + f(g, h'). Thus any two elements of the image of / commute, 
so the image of / generates a commutative subgroup of K. This proves that G ® H is abelian. Let 
7 : GxH — > M{G) x M(H) be the canonical map which is onto. It is clear that if / G 'BiC (G xH,K), 
then / o 7 g <Btt(M(G) x M{H),K). We thus define a map !F: ®tf(G x H,K) ->■ <BU(M{G) x 
A6(H),K) by $"(/) = / o 7. It turns that it is one-to-one (since 7 is onto). Because the image 
of / G ( Bil[G x H,K) generates an abelian subgroup in K, for a fixed h & H the kernel of the 
homomorphism /(•, h) : g G G — > /(<7, h) € K contains [G, G] in such a way that f(g, h) = f(g', h) 
for every g' g~ l G [G, G]. The same holds for f(g, ■) : h G H h-> /(<?, h) £ K for all fixed <? G G. This 
implies that / = /' o 7 for some /' : %B{G) x JlB(H) — > if. Because 7 is onto, it can be checked 
that /' is bilinear. It follows that ^ is a bijection, and it is even natural in K (see [22]). The last 
statement then follows from usual category theoretic arguments. □ 

It follows from lemma [T] that it is unnecessary to consider tensor product for non-abelian groups. 
This is the reason why bilinear maps are defined on abelian groups. 

More generally, it is also possible to define the tensor product of i?-modules. Let A, B be two 
i?-modules (in additive notation), and let G be the submodule of R^ ' generated by the elements 
(a+a', b) — (a, b) — (a' , b), (a, b + b') — (a, b) — (a, &'), (aa, b) — a(a, b), (a, ab) — a(a, b) for all o, a' G A, 
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b,b' G B, a G R. Then, the quotient i?-module R> > /C is called the tensor product of A and 
B, and is denoted by A <S>r B. It is the solution of the following universal problem: let D be a 
i?-module, and let / G i BUr{A x B, D). Then, there exists a unique i?-linear map g : A ®r B — )■ D 
such that g(a <g> 6) = /(a, 6) for all a G A, 6 € I? (where 0: 4xB->i ®# 13 is the restriction to 
A x B of the canonical epimorphism from R( AxB > to yl ®.r B, and it is actually a i2-bilinear map 
also called the canonical bilinear map). 

Remark 1. Taking R to be Z, then we recover the tensor product of abelian groups and it follows 
that M{G) ®% M(H) = G <g) H = M(G) <g> M(H) for every groups G, H. Moreover the maps 
(a, b) £AxB\->a®b£A®B and (a, b) G A x B h-> a <g) 6 G A (gig S are also (essentially) the 
same, where A, B are abelian groups. 

In what follows, if A, B are two abelian groups, then A ® B stands for A (£)% B (according to the 
above remark there is no confusion). 

It is clear by construction that A ®r B is spanned as a R- module by a ® b where (a, b) G Ax B. 
Therefore any element of A <S)r B is given as a finite sum ai(a± <8> &i) + • • • + a n (a n <g> b n ), cti G R, 
a,i G A, bi G B , i = 1, • • • ,n. Such elements are referred to as tensors while generating elements of 
the form a (8) b are called elementary (or basic) tensors. 

Other properties of the tensor product are recalled below. The first result is given without proof 
since it is easy. The proofs of the two other may be found for instance in [7]. 

Lemma 2. Let A and B be two R-modules with respective spanning sets S and T. Then, A ®r B 
is generated as a R-module by the basic tensors s <8>t, s G S, t G T. 

Lemma 3. Let A, B be two R-modules. There is a unique isomorphism of R-modules a: A<S>rB = 
B <S)r A such that a (a (8) b) = (b <g> a) for every a G A, b G B. 

Lemma 4. Let A be a R-module, and (Bi)^] be a finite family of R-modules (i.e., I is assumed to 
be a finite set). Then, there is a unique isomorphism of R-modules 5: A®RQ) ieI Bi = Q i&I (A®RBi) 
such that 5 (a <S> (bi)iei) = (a® 6j)ie/ for every a G A and (bi)a=i G © ie / B{. 

Remark 2. It may be shown that <S>r is also "associative": (A ®r B) ®r C = A ®r (B ®r C) for 
every R- modules A,B,C (this isomorphism is natural in A, B,C). Together with lemma El this 
shows that the category of -R-modules with the tensor product is a symmetric monoidal category 
(see |23j). Loosely speaking this means that the bracketing of factors in a ra-fold tensor product 
is irrelevant (because any two ra-fold tensor products that differ only in the position of brackets 
are canonically isomorphic). The notion of multilinear maps /: A\ x • • • x A n —> B (where the 
.Aj's and B are i?-modules) (see for instance |6|10|13|16|30j ) is equivalent to that of linear maps 
/ : A\®r- ■ -®RA n — > B (bilinear maps are recovered with n = 2). In particular, any such multilinear 
map is actually induced by a unique bilinear map, for instance /: A\ x (A2 <8)r ■ ■ ■ <8>_r A n ) — > B. 
We take advantage of this remark to indicate that the notion of tensor product was already used 
in [6j (remark 7.1 and subsection 7.2) but in a somewhat limited way since it was not the purpose 
of the authors. In this contribution we limit ourselves to bilinear maps. 

4 Tensor product of finite abelian groups 

In this section we focus on the tensor product of finite abelian groups that is even explicitly 
computed. Moreover we give some conditions under which a pairing may exist. 



4.1 Some computations of tensor products 

The objective of this subsection is to compute the tensor product of finite abelian groups. So it 
seems natural to compute at first the easiest example. In what follows, (a, b) denotes the greatest 
common divisor of a and b. The cyclic group of integers modulo a is denoted by Z a (and also C a 
when considered multiplicatively written). 

Lemma 5. For every positive integers a, b, 7L a ®7Lb = Z( a m 

Proof. Since (a, b) divides both a and b, the map / : Z a xZ& — > Z( afe ) given by f(x mod a, y mod b) = 
(xy) mod (a, b) is well-defined. Moreover it is bilinear so that it gives rise to a group homomorphism 
-it: r L o 0L\ ) — > %(a,b) such that ir((x mod a)(g)(y mod b)) = (xy) mod (a, b). We observe that n((x mod 
a) (g) 1) = x mod (a, b) for every x, so that 7r is onto. Let Z — > Z a ® Z& be given by i i-> x(l <g> 1). 
This is clearly a homomorphism of groups, and for x G aZ, we have x(l (g) 1) = ((x mod o) <8> 1) = 0. 
Similarly, when x G 6Z, we have x(l <g> 1) = 1 <8> (x mod 6) = 0. Therefore, aL + VL = (a, 6)Z 
belongs to its kernel, and we obtain a homomorphism of groups g : Z( a m — >• Z a (g> Z& such that 
g(x mod (a, 6)) = x(l(gl) = ((x mod a) (g 1 = 1 <S> (x mod b) for all x. We have ir(g(x mod (a, 6))) = 
7r((x mod a) ® 1) = x mod (a, b) for every x. We have <?(7r(x(l (g 1))) = xg(l) = x(l ® 1). This is 
sufficient to check that n and g are inverses one from the other because all tensors in Z a CgZb have the 
form x(l(gl) for some x G Z. Indeed, for an elementary tensor (x mod a)<8)(y mod b) = (xy)(l(gl). 
So sums of elementary tensors are also multiple of 1 <g 1. □ 

Remark 3. It follows from lemma [5] that Z a (g Z& = (0) if, and only if, a and 6 are co-prime. 

Lemmas [3j 0] and [5] imply the following result that actually covers all examples of finite abelian 
groups. 

Lemma 6. Let (ai) r £ =1 , and (6j)™ =1 be two families of positive integers. Let A = 0™ j Z^, and B = 
©?=i ^b ■■ Then, A®B = ©i=i,---,mZ( a . b .\ where the isomorphism is given by the unique group ho- 

momorphism such that ((xi mod ai, • • • , x m mod a m )®(yi mod b\, ■ ■ ■ ,y n mod b n )) i-> ((xiyj) mod 
(aj, bj))i=i t ... jm . Moreover, the canonical bilinear map (g is then given by®: AxB — > fln Z( a &.) 

J-l'-'.n i=l,...,m 

3=1, ■■■,«• 

iirai/i (xi modai,- • • ,x m mod a m ) <g> (yi mod &i,--- ,y n mod 6 n ) = ((x^j) mod (oj,6j))i=i,...,m- 

J=l,"',n 

Any finite abelian group A is isomorphic to a direct product © pG p ( ©j gy 4 Z pl J where P is the 
set of all prime numbers, for each p G P, A p is a finite subset of N+ such that all but finitely many 
ApS are non-void (hence © pe p (©ieA ^V) * s a f a l se infinite sum since © iG Z pi = (0) for every 
p G P with >l p = 0). This decomposition is unique up to isomorphism, and we refer to it as the 
primary decomposition. All these results make possible to compute A® B for any finite abelian 
groups A, B using lemma El and also to deduce an essential finiteness result for tensor products. 

Lemma 7. The tensor product of two finite groups is finite. Moreover, using the above notations, 
for every finite abelian groups A, B, the primary decomposition of A® B is given by 

A ® B = ®[® V-(-) 

peP \i£Apj£B p 
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Proof. Let A and B be two finite abelian groups. Then each of them admits a decomposition in di- 
rect sum of finite cyclic groups, and their tensor product is finite according to lemmaEl Because the 
tensor product of two groups is isomorphic to the tensor product of their abelianization (lemma [1]), 
the expected conclusion holds (we implicitly used the two easy facts that the abelianization of a 
finite group is finite, and the isomorphism relation of groups preserves the order). □ 

Remark 4- The tensor product of two finite groups does not depend on the decomposition of the 
abelianization of each group into a direct sum of cyclic groups. Indeed, ® is a functor (and even a 
bifunctor), and it is an obvious property of functors to transform isomorphisms into isomorphisms. 
More precisely, for groups (finite or not) G, G', H, H' such that G = G' and H ^ H', then G®H ^ 
G' <S> H' . The converse assertion is false since for instance Zq ® Z4 = Z2 — Z2 ® Z2 . 

4.2 Non-degeneracy of the canonical bilinear map 

In this subsection we present a sufficient condition for the canonical bilinear map ® to be non- 
degenerate. We also prove that the canonical bilinear map from A x A to the tensor square A ® A 
always is non-degenerate for each finite abelian group A, providing an infinite family of pairings. 

Lemma 8. Let a and b be two positive integers. The canonical bilinear map ®: (x mod a,y mod 
b) £ Z„ x Zj 4 (xy) mod (a, b) € Z/ a ^ = Z a ® Z& is non- degenerate if, and only if, a = b. 

Proof. If a = b = 1, then all groups are trivial, and the result is obvious. Let a = (a, b) = b 7^ 1. 
Let x mod a / such that for every y, (xy) mod a = 0, then we obtain a contradiction when 
y = 1. Therefore, ® is non-degenerate. Now, let us assume that (a, 6) < a for instance. Then, 
(a, b) mod a/0, and for all y, (a, 6)y mod (a, 6) = so that ® is degenerate. □ 

Let p be a prime number. Let j4, B be two finite abelian p-groups (that is, finite abelian groups 
of order p n for some n), and C be an abelian group. The theorem of invariant factors imply that 

m n 

,4 = Z pai with ai > a 2 > ■ ■ ■ > a m > 1, and B ^ Z ^ with /?i > /3 2 > • • • > /3 n > 1. 

We recall that the exponent e%p(G) of a finite group G is the least common multiple of the orders 
of the elements of G. Therefore, e?(p(A) = p ai and e?cp(B) = p^ 1 . Let /: A x B -> Cbe a pair- 
ing. Let us assume for instance that e?cp(A) > exp(B). Then, f((e%p(B)l,0, • • • ,0), (7/1, • • • , y n )) = 
/((1,0,--- ,0),e*p(B){ yi ,--- ,y n )) = /((1,0,--- ,0), ((),••• ,0)) = 1 for every y lr - ■ ,y n . Thus / 
would be degenerate. Therefore, e%p(A) = e?(p(B). The following lemma is thus proved. 

Lemma 9. Let A,B be two finite abelian p- groups, and C be an abelian group. Let f : A x B — >• C 

be a pairing. Then, e%p(A) = e%p(B). 

Let A = ©„ e p A(p) and B = © pG p-B(p) be the primary decomposition of two finite abelian 

groups A and B. For each prime number p, let A(p) = ©^ % p a i and B(p) = ©™f } Z ^ be 
the invariant factor decomposition of each factor of the primary decomposition. Let p, q be two 
distinct prime numbers. Then by lemma EJ A{p) ® B(q) ^ ©"^ ©™={ p) Z, a . qP]) =* (0). Thus, 

again by lemma EJ j4 ® i? = flHj4(p) ® B(p). Let /i^xB-^i^Bbea bilinear map. Then, 

f(a,b) = for every a € -A(p), 6 € B{q) with distinct prime numbers p, q. For each prime number 
p, let / p : A(p) x B(p) — >• A(p) ® -B(p) be the obvious restriction of /, which also is a bilinear map. 
Then, f((a p ) pe p, (b p ) p€P ) = (f p (a p ,b p )) pt = P . In particular ® p : A(p) x 5(p) -4- A(p) ® S(p) is the 
corresponding canonical bilinear map so that (a p ) p< =p ® {b p ) p& p = (a p ® p b p ) p£ p. 
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Theorem 1. Using the above notations, the canonical bilinear map ®: A x B ^ A® B is non- 
degenerate if, and only if, for every prime number p, (& p is non-degenerate (and in particular, 
according to lemma\f^ e%p(A(p)) = e%p(B(p))). More generally, f G 'Bili^A x B,A% B) is a pairing 
if, and only if, f p G r BU{A{p) x B(p),A(p) (£> B(p)) is a pairing for each prime number p. 

Proof. It is obviously sufficient to prove the second assertion. It is clear that non-degeneracy of 
all f p implies non-degeneracy of /. Now, let us assume that / is non-degenerate but there is some 
prime number po and a G A(po), a /0 such that f p (a,b) = for every b G B(p). Then, let us 
consider (a p ) p( zp G A such that a p = for every p ^ po, and a Po = a. Then, for every {b p ) p& p G B, 
/((op)p, (b P )p) = which contradicts non-degeneracy of /. □ 

Next lemma explains in what extend non-degeneracy of the canonical bilinear map is essential for 
the existence of pairings. 

Lemma 10. Let A, B be two non-trivial R-modules. If there are a R-module C and a pairing 
(• | •) : A x B — > C, then the canonical bilinear map <g): AxB->4 <S)r B is non- degenerate. 

Proof. By contraposition, let us assume that <8> : A x B — > A ® j? B is degenerate, and for instance 
that it is not left non-degenerate. Then, there exists a^ G A, a^ ^ Oa, such that for every b G B, 
ao <8> b = 0. Let (• | •) : A x B — > C be a bilinear map. Then, there exists a unique i?-linear map 
/: A <$Z)r B — >■ C such that f(a ® 6) = (a | b). In particular, (oo | b) = f(ao <8>b) = /(0) = \c for all 
b G B. Therefore, (• | •) is left degenerate. □ 

We anticipate a result from subsection 15.41 to state a sufficient condition for the existence of a 
pairing, from the cartesian square to the tensor square of some abelian group, provided by the 
following result. 

Theorem 2. Let A be a finite abelian group. Then, the canonical bilinear map (g>: Ax A— >A®A 
is non- degenerate. 



Proof. Since A is a finite abelian group, it admits a decomposition into cyclic groups A = fln 1 



J d, 



t=l 



for some integers d%. In subsection 15.41 is proved that there exists at least one pairing ((J)™ =1 ^di) x 
(©"=i ^di) -^ Cn, where Cn denotes the cyclic group of order N, with N = Yli=x ^i- Therefore 
according to lemma [TOl the canonical bilinear map (g>: (©" = i^dj x (©™ = i^dj —> (©"=1^*) ® 
(0™ =1 Z^.) is non-degenerate. Let <p: A — > ©™ =1 Z^ be an isomorphism of groups. Let us assume 
that there exists ao G ^4 such that ao <S> a = for every a£ A. Then, 0(ao) ® 4>{a) = for every 
a £ A. Since is onto, this implies that <f>{ao) <S> a' = for every a' G ©™ =1 Z^. So that (j)(ao) = 
(by non-degeneracy), and thus oq = 0a- □ 

Remark 5. Theorem [2] provides an infinite family of pairings because in this situation ® is itself a 
pairing. This generalizes some optimized constructions of pairings over elliptic curves on finite fields 
as defined in [Tl] such as Weil ([25]), Tate (|33|) and ate ([E]) pairings which may be defined on 
Z a x 7L a for some integer a and with values in the group of a-th roots of the unity /i a = Z a = Z a <S> Z a 
in a finite field ¥ p n (where a divides p n — 1). We observe however that these pairings are usually 
defined on a bigger cartesian product of groups (see for instance [31 i concerning Weil pairing). 

Remark 6. We also observe that there are some pairings / : A x B — > C where A,B,C are finite 
abelian groups such that A and B are non-isomorphic. For instance, let p be a prime number, and 
m > 1 be an integer. Then, the canonical bilinear map <S> ■ Z" 1 x 7L p — > Z!^ given by (xj mod p)%Li <S> 
(y mod p) = (xiy mod p)^l 1 is non-degenerate. 
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5 Constructions of bilinear maps and pairings 

In full generality the canonical bilinear map is not always non-degenerate (even when the tensor 
product does not collapse to zero, see the discussion after lemma [TO]) . As stated in lemma [TU1 non- 
degeneracy of this function is a necessary condition for the existence of pairings. In this section, we 
present other constructions of bilinear maps and pairings using the fact that the set of all bilinear 
maps, from some fixed Ax B to C, forms an abelian group (or R- module). Moreover we prove that 
for a particular choice of A, B and C, "BU(A x B,C) is actually a ring, and that the pairings are 
exactly the group of units of this ring (see theorem [3]) . 

5.1 Abelian group structure of bilinear maps (and pairings) 

First of all, we know from the proof of lemma Q] that for every groups G,H,K, c Bi ( {G x H,K) = 
l Bil{M(G) x JZ6(H),K). According to the universal property of tensor product of groups, t Bil{G x 
H,K) = 9-Com(G (g> H,K). Therefore, for every triple of abelian groups (respectively, R- modules) 
A, B, C, 'Bit (A x B,C)^ Xom{A ® B, C) (respectively, <BiC R {A x B,C)^ 3iom R {A ® R B, C)). But 
the later is itself an abelian group (respectively, a -R-module) with point-wise operations, so that 
(Bit (A x B, C) (respectively, 'BU R (A x B, C)) becomes an abelian group (respectively, a iZ-module). 
More precisely, let A,B,C be three .R-modules, and let us assume that A, B are given in additive 
notation (recall that 0a, Ob are the identity elements of A and B) and C is multiplicatively written 
(recall that 1q is the identity of C), we have for /, g G 'BiC^A x B, C) and a G R, three new bilinear 
maps fg, f~\ f a G <BU R (A X B,C) defined by (fg)(a,b) = f(a,b)g(a,b), r l {a,b) = {f{a,b))- 1 
and f a (a) = (f(a)) a (where the scalar multiplication in C is given by (a,c) i-> c a because C is 
assumed to be in multiplicative notation) for all a G A, b G B. This also defines a structure of 
Z-module given by / n (a, b) = (f(a,b)) n for all a G A, b G B, n G Z. The following (obvious) 
construction uses direct product of modules (or abelian groups) . 

Lemma 11. Let (Cj)" =1 be a family of R-modules, and A, B be R-modules. Let fa G 'Bit R {Ax B , d) 
for i = 1, • • • , n. Then, the map (/i, ■ ■ ■ , f n ) ■ A x B — > C\ x • • • x C n defined by (/i, • • • , /n)(oi b) = 
(/i(a, b), • • • , / n (a, b)) belongs to 'Bil^A x B, C\ x • • • x C n ). Moreover, if at least one of the fi 's is 
non- degenerate, then (/i, • • ■ , f n ) itself is non-degenerate. 

Let us study the group structure of 'Bil^A x B, C) in an easy case. For every group G, let "End(G) = 
"Kom{G, G) which is a ring when G is abelian. Let a, b be two positive integers. Then, we have the 
following sequence of group isomorphisms Si/"(Z a xZb,Z( ab )) = #bm(Z a (g)Zb,Z( a m) = 4 End(Z^ ab ^ ) ). It 
easy to check that c End{'L n ) = Z n as rings for any n. So that 'BU(7j a xZf ) , Z( a m) may also be equipped 
with a structure of commutative ring with a unit isomorphic to Z( a m. Moreover, as a cyclic group of 
order (a, 6), and therefore as a Z-module, c Bil^L a x Zb,Z( ajb )) is generated by the canonical bilinear 
map ®. Thus r BiC{'L a x Zt,Z( ab )) is the free Z( afe )-module generated by <S>, or, in other terms, it is 
isomorphic to the group Z( afe ) , so that for any bilinear map / : 7L a x Z, h — > Z( ab ) , there exists a unique 
kf G Z( ab ) such that / = (g> fc/ , where we recall that ® k f(x mod a,y mod b) = kjxy mod (a, b). It 
follows that if ® is non-degenerate, then / is a pairing if, and only if, {kf, (a,b)) = 1. Moreover, 
if <g> is degenerate, then there is no pairing defined on Z a x Zj, by lemma [TUJ Thus, according to 
lemma El a pairing / G c Bil[TL a x Z a ,Z a ) is exactly a generator of the cyclic group ( Bit{^L a x Z a ,Z a ) 
of order a. The following result is proved. 

Theorem 3. The set of pairings from Z a x Z a to Z a forms a group isomorphic to the group of 
invertible elements of the ring Z a under multiplication. In particular, there are exactly 4>{a) pairings 
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in this situation, and if f € "Si((Z a x Z a ,Z a ) is a pairing, then any other pairing g has the form 
f kg , for a unique k g G Z a invertible modulo a. Moreover, if p is a prime number, then the group of 
pairings in liiliTLp x Z p ,Z p ) is isomorphic to Z* 

Remark 7. Let p be a prime number. Let / € l Bi[{ r L p x Z p , Z p ) be a pairing. According to theorem[3J 
any other pairing is given by / for k € Z* as it was already noticed in [8] (but we observe that the 
underlying group structure on pairings was not explicitly mentioned). In this situation, the integer 
k was called the logarithm of the pairing to the base f . This also explains why F. Vercauteren write 
in [34] that "there is essentially only one pairing". 



Let A = ©„ e p^4(p) and B = p6 p-B(p) be two finite abelian groups decomposed following the 
primary decomposition (each A(p) and B(p) are finite abelian p-groups). For each prime number 
p, 'BU(A(p) x B(p),A(p)®B{p)) = T,nd(A(p)<g>B(p)) so that { BiC{A{p) x B (p) , A(p) <g> B (p)) admits 
a ring structure. From the discussion preceding theorem [TJ we know that 'Bii^A x B,A® B) = 
eP "BU (A(p) x B (p) , A(p)®B(p)) (group direct sum). Let us assume that for each prime number p, 
A(p) = Z p ip = B{p) (the case n p = is necessarily possible in such a way A{p) = (0) = B{p)). Then, 
according to theorem O for each p, the pairings in , SU(A(p) x B(p),A(p) <g) B{p)) = TL V ^ V form the 
group Z^„ p of invertible elements modulo p np , and by theorem [1] the pairings in Bit (A x B , A® B) = 
eP 7, p "p is the group direct sum pg p Zp„p . Again by theorem El if n p E { 0, 1 } for every prime 
number p, then the pairings in 1}U(A x B,A® B) = 0„ e p Z p «p is the group direct sum 0„ G p Z* 
(where Po = {p £ P: n p = 1 }). 

5.2 Tensor product of linear maps 

One of the main feature of the tensor product that has not been used yet in this contribution is 
the fact (g>p is a bifunctor. In particular, it transforms a pair of linear maps into one linear map as 
follows. Let Ai, A2, Bi, B2 be four R- modules. Let /: Ai — > A2, g: B\ — > B2 be two i?-linear maps. 
Then, the map / (g> g: A\ ®>rB\ — > A2 ®rB2 defined by (/ <g> g)(a (8)6) = f{a) ® g{b) is a i?-module 
map (be careful that the same symbol (8 denotes the canonical bilinear map Ai x Bi — )• ^4j (8p -Bi 
for i = 1, 2). Since <BU R (Ai x B 1 ,A 2 <8p B 2 ) = ^om R (A 1 ® R B\, A 2 <8p B 2 ), it follows that / <8 g is 
induced by a (unique) i?-bilinear map h : j4i x B\ — > A 2 8>p B 2 such that /i(a, 6) = /(a) <8 5(6) for 
a€ A 1 ,b€ B 1 . 

Lemma 12. Let us assume that f is a monomorphism, g is an epimorphism, and that the canonical 
R-bilinear map <8> : A2 x B2 — > A2 <8p B% is non-degenerate, then h is left non- degenerate. 

Proof. Let a € A\ such that for every 6 € Bi, h(a, 6) = 0. Then, /(a) (8 5(6) = for every b € B. 
Since g is onto, /(a) <8 6' = for all b' E -B2. Since the canonical bilinear map is non-degenerate, 
f(a) = 0a 2 > so that a = 0a x because / is one-to-one. □ 

5.3 Divide out the kernels 

In this subsection is presented a natural way to construct a pairing from a bilinear map by dividing 
out two kernels. 

Let A,B,C be three -R-modules (where R is a commutative ring with a unit). The groups 
A, B are written additively, while C is given in multiplicative notation. Let f : A x B — >Cbea 
i?-bilinear map. We define two linear maps 7/ : A — > 9{om R {B,C) and pf.B—> 9{om R {A,C) given 
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respectively by 7/ (a) = /(a,-) an d Pf(b) = /(•,&)■ Let us define Lj = P| fcGB ker /(•, 6) = ker7y, 
i?/ = P) a£j4 ker f(a, •) = kerp^ which are respectively a sub-module of A and a sub-module of B 
(they are sometimes called the annihilator of ^4 and B respectively, see [H]). We observe that if 
a - a' £ L/, then for all b £ B, /(a, 6)/(a', 6) _1 = f(a - a',b) = \c so that f(a, b) = f(a',b). 
Therefore, there is a well-defined i?-bilinear map /1 : A/Lf x B —■ C such that f±(a mod Lf, b) = 
/(a, b) for all a £ A, & £ 5. Similarly, we have a well-defined i?-linear map fi : yl x B/Rf —?■ C such 
that /2(a, 6 mod i?/) = /(a, 6) for all a £ A, 6 £ i?. The first map is left non-degenerate while the 
second is right non-degenerate. We may continue the process in order to get a full non-degeneracy 
Let Rfc = PlamodL &A/L ker _fi(a mod Ly , •) = Rf. Similarly we have Lf 2 = Lf. We obtain two 
well-defined non-degenerate i2-bilinear maps f3,fi' A/Lf x B/Rf — > C such that 

fs(a mod Lf,b mod Rf) = f\{a mod Lf,b) 

= f(a,b) ( . 

= f 2 {a,b mod R f ) K } 

= f^(a mod Lf, b mod Rf) 

for each a £ A and b £ B. Thus the two pairings are the same one. 

When the bilinear map / into consideration is the canonical bilinear map &) : A x B — > A (&# B 
itself, then we define ± B = L®, and A 1 - = R®. Moreover, let A: A — >■ A/ ± B and 5: B ^ B/A 1 - be 
the canonical epimorphisms. We have a well-defined non-degenerate pairing (g/: A/^B x iJ/A- 1 - — >• 
^4(8)^-6 such that A(a) <g>' 5(6) = a <g> 6 for every a £ A, b £ B. Let us define §> = (A <g> 5) o <g/ £ 
$tf R (A/ ± Bx B/A ± ,A/ ± B® R B/A ± ). It satisfies (A<g>5)(A(a)(g>'<5(&)) = (A®o")(a<g6) =A(a)® 2 <&(6) 
for every a € yl, 6 £ -B, where 18)2 : A/ B x B/A — >■ A/ B® R B/A is the canonical bilinear map. 
Actually it is quite clear that (g) = <g>2. 

Lemma 13. T/ie canonical bilinear map <g>2 : A/ BxB/A — > A/ B® R B/A is non- degenerate. 

Proof. The bilinear map <g>' : A/ B x B/A — > A ® R B is non-degenerate. Then according to 
lemma \TU\ the canonical bilinear map <g>2 '■ '■ A/^B x B/A 1 - — > A/^B <S> R B/A 1 - is itself non- 
degenerate. □ 

5.4 Finite abelian group duality and characters 

Let A, B, C be three -R-modules. One of the main property of a given pairing (• | •) : A x B — )• C is the 
non-degeneracy. It exactly states that A embeds into !Hom R {B, C) as a sub-module by (a \ ■) : B — > C 
for each a £ A, and that -B embeds into 0-Com R {A, C) also as a sub-module by (• | b) : A — )• C for 
each b £ B. Using this idea we may construct a pairing. Let A, C be two -R-modules, and let B be 
a sub-module of 9{om R (A,C). Let (• | •} : A x B — > C be defined by (a \ b) = 6(a) for every a £ A, 
6 £ i?. By its very definition, this is a i?-bilinear map which clearly is right non-degenerate. We 
observe that the elements of A may be seen as linear maps on B as follows: let a £ A, and define 
a: B ->■ C by a(6) = 6(a). The facts that a £ ^om R (B,C) and (•) : a £ A -> a £ tfom R (B,C) is 
a homomorphism of groups are easily checked. We say that ^4 seperates the points of B (following 
a usual terminology from functional analysis) if 6(a) = Oc for every 6 £ B implies that a = Oa- 
Equivalently, this means that the map a = (a | •} is one-to-one for every non-zero a, so that A 
embeds into !tiom R {B, C) as a sub-module. In this case, and only in this case, (• | •) as defined above 
is a pairing. We now propose two actual examples of such a construction. 
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Dot-product construction: Let IK be any field. Let V be a d-dimensional vector space over 
K. Its (algebraic) dual V* is the vector space J£wik(V,K) of all linear forms. We observe that V 
separates the points of V* since if v 6 V is non-zero, then it belongs to some basis of V over IK so 
that we may choose a linear map £: V — > K such that £(t>) 7^ and £ takes any value for the other 
elements of the basis. Therefore the IK-bilinear form (• | ■) : V X V* — > K given by (t> | £) = £(u) is a 
pairing. Moreover, if (ej)^ =1 is a basis of V over the base field, then for each j = 1, • • • , d, we may 
define a linear form e J G U* by the relations e?{ei) = 1 if j = i, and otherwise. It turns that (e*)f =1 
is a basis of y* over K called the dual basis of (ej)f =1 , and that V = F* (as vector spaces). Under 
the isomorphism e l \-> &i, the pairing becomes (v \ w) = Y^i=x v i w ii where u, = e l (v), W{ = e l {w) 
for each i = 1, ■ ■ ■ ,d, and we recover the usual dot-product of K d . 

Remark 8. The above construction works in particular when IK is the finite field ¥ p n with p n 
elements of characteristic p. In this case, any finite-dimensional vector space is actually finite, and 
we obtain a pairing between finite spaces (and therefore finite abelian groups). When n = 1, we 
recover the construction of "dual pairing vector space" from |26|27j . 

Generalized duality of finite abelian groups: Let CV be a cyclic group of order N, with 
generator 7. Let A be any finite abelian group. A homomorphism of group \ : A — > CV is called 
a character. Since for every a € A, a) ' = 1a, it follows that x( a ) = 1- Let d be a divisor 
of N, and let x £ Mom^Ldi Cat)- Since for every x, xi x mod d) d = 1, it follows that im(x) is a 

N ■ 

subgroup of the unique cyclic subgroup Cd of CV of order d. Therefore, x( x mod d) = 7~d J for 

jv ■ 
some j = 0, • • • , <i — 1 that depends on both x an d x. In particular, we have x(l) = 7^* f° r some 

z, and then, %(x mod d) = x{ x ^) = x(l) x = 7"^" mo • This means that all characters of Z^ have 

N • 

the form Xi- %d ~^ CV with Xi(# mod d) = j~d lx for i = 1, • • • , d. It is not difficult to check that 
•P ': Zrf — >■ 'HomiJLd^C^) given by <?■(«) = x« is a group isomorphism. (Such a generalized approach 
for group characters has been used in [28] for other purposes.) 

Lemma 14. Let d\,di be two divisors of N . Then, Z^ x Z^ 2 and "HomiTLdx x Z^Ctv) ore isomor- 
phic. 

Proof. The proof is easy since it suffices to observe that 'Hom{JLd 1 X Z<j 2 ,CV) and ^im^Z^CV) x 
"Hom^Ldi, Cm) are isomorphic since we already know that ^bm(Z^. , Cat) is isomorphic to Z^ for i = 
1, 2. Let qi : Z^. — >• Z^ x Z^ 2 be the canonical injection for i = 1,2. Let us define the homomorphism 
of groups <£ : Mom{Z dl X %d 2 , C N ) -)■ ^om(Z dl , Cat) x ^om(Z d2 ,C N )by #(x) = (x ° *i » X ° *2) which 
is obviously one-to-one. For ^W £ ^""(Z^ , Cat) , i = 1,2, the map x : (^1,^2) ^ X ( x i)x (^2) 
belongs to flom(Z dl x Z d2 ,Cjv), and $(x) = (x (1) ,X (2) )- □ 

From lemma[H(and its proof), it is easy to see that #2w»(®|* x Z^*, CV) = ®" x rtom(Z di ,C N ) m > =* 
®£ll Z™ 1 for every divisor dj of iV and every integer mi, i = 1, • • • , m. For each i = 1, • • • ,m, and 
x = (xi, • • • , Xmi),y = (2/1, • • • ,y mi ) G Z^% we define a dot-product 

rrii 

x-y = ^{xjVj) moddj . 
i=i 

Therefore, an isomorphism from ®™ x Zj£* to ^cwr(®™ x Z™ 1 , C N ) may be given by &{a^ , • • • , a( m ) ) 
X a (i) ... a (m) for each a^> E Z™% i = 1, • • • , m, where 

m 
1 fll (Win TT ^a (l) -a: (8) 

1=1 
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for every (xW, • • • , x^ m >) G 0™ x Z™* (so that x"> G Z^ for each i = 1, • • • , m). Consequently, one 

obtains a bilinear map (•[•): 0™ x Z7* x 0™ x Z™ 1 -►' CW such that 



<(,«..., xW) | (,«,..., ^)) = Il7^ y 



7 

8=1 



(where x^',y^ 1 ' G Z™', i = 1, • • • , m) which is right non-degenerate by construction. But this 
bilinear map is clearly symmetric, therefore it is actually non-degenerate and it defines a pairing. 

Example 3. Let A = 0^ 1 Z™* for some integer m. 

1. Let 7 be a primitive element of the finite field ¥ k (see [20]). Let us assume that d% is a 
divisor of p k — 1 for all i = 1, • • • ,m. Then, we obtain a pairing from A x A to F* fe given 

by ((x« ■•■ ,* (m) ) I (y (1) ,--- ,y (m) )> =^ t ¥^ ii ' yli) \ 

2l7T 

2. Let 7 = e~N~ be a primitive iV-th square root of unity in the complex field. Let d{ be a divisor of 
N for each i = 1, ■ ■ ■ , m. Then, we obtain a pairing from Ax A to C* given by ((x^ \ • • • , x^ m ') \ 

(y(l),..., y H)> =e S£i^ W -«' W ). 

Remark 9. The above construction still works when we consider usual group characters (see |22j) 
as it is shown in the second point of example El Let A be an abelian group. In the classical setting 
a character is a homomorphism of groups from A to the multiplicative group C*. Torsion in A 
implies that the image of a character belongs to the group of complex e^p(^4)-th roots of unity 

m 

C-ew(A) • It is clear that for every decomposition of A into a sum of cyclic groups Ah Z™ 1 , di divides 

8=1 

e?(p(A) (since A contains an element of order di for each i). The above machinery works. Moreover 
it may be recovered as follows in an abstract setting: let us denote by A = ?{bm(A,C e: q,(A)) the 

group of characters, called dual group of A. It is well-known that the double dual A is naturally 
isomorphic to A. The natural bilinear map (• | ■): A x A —^ C^pM) is given by (a \ x) = x( a )- It 

is clearly right non-degenerate. Left non-degeneracy follows from A = A. Indeed, the isomorphism 
into consideration is given by a(x) = x( a ) f° r every a £ i, x £ i. Therefore, a(x) = x( a ) = 1 
for every x G A implies that a = 1 which is equivalent to a = Oa- According to lemma [TU1 this 
means that for every finite abelian group A, the canonical bilinear map ®: A x A — > A <S) A is 
non-degenerate. 
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